Skip to content
OpenAdvisories

Archive

12 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /12 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 1.3
    CVE-2025-46825

    Kanboard has stored Cross-site Scripting vulnerability in project name

    Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting (XSS) Vulnerability in the `name` parameter of the `http://localhost/?controller=ProjectCreationController&action…

    kanboard kanboard
  • Low 2.7
    CVE-2025-46748

    Unverified Password Change

    An authenticated user attempting to change their password could do so without using the current password.

    Schweitzer Engineering Laboratories SEL Blueframe OS
  • Low 2.7
    CVE-2025-46744

    Improper Privilege Management

    An authenticated administrator could modify the Created By username for a user account

    Schweitzer Engineering Laboratories SEL Blueframe OS
  • Low 2.4
    CVE-2025-47274

    ToolHive stores secrets in the state store with no encryption

    ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Due to the ordering of code used to start an MCP server container, versions of ToolHive prior to 0.0.33 inadvertently store secrets in the run co…

    stacklok toolhive
  • Low 3.3
    CVE-2025-46718

    sudo-rs Allows Low Privilege Users to Enumerate Privileges of Others

    sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows user…

    trifectatechfoundation sudo-rs sudo-rs rust-sudo-rs Debian Ubuntu crates.io
  • Low 3.3
    CVE-2025-46717

    sudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders

    sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list <pathname>`. Use…

    trifectatechfoundation sudo-rs sudo-rs rust-sudo-rs Debian Ubuntu crates.io
  • Low 2.1
    CVE-2025-46729

    phpDVDProfiler Cross-site Scripting vulnerability

    julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v_20230807 and prior to v_20250511, cross-site scripting in …

    julmud phpDVDProfiler